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Claims 

[ci] A method of secure distribution of encryption/decryp- 
tion l<eys among two communicating parties comprising 
of: 

public (non-secret) selecting a natural number n; 
public (non-secret) selecting a natural number k; 
public (non-secret) selecting a k-tuple S= (S , S S ) 
of pairwise-commuting nxn matrices with integer coeffi- 
cients; 

private (non-public) generating the polynomial p(x ^, x^, 
.... X ) in k variables X ,x , .... x and with integer coef- 

' k l' 2' ' k ^ 

ficients by the first communicating party; 

private (non-public) generating the polynomial q(x ^, x ^, 

.... X ) in k variables X ,x , .... x and with integer coef- 
' k i' 2' ' k ^ 

ficients by the second communicating party; 
private (non-public) generating nxn matrix A with inte- 
ger coefficients by the first communicating party accord- 
ing to the formula: 
A = p(S , S , S ); 

12 k 

private (non-public) generating nxn matrix B with inte- 
ger coefficients by the second communicating party: 
B = q(S , S , S ), 

12 k 

(therefore, A-B = B-A); 



public (non-secret) selecting a compact topological 

monoid G by both communicating parties; 

public (non-secret) selecting an «-tuple ^= (g , g ,...,g ) 

12 n 

of pairwise commuting elements in G by both communi- 
cating parties; 

generating the n-tuple g by the first communicating 
party by the formula: 

12 n 

where 

AIJ A2J AnJ 

y =9 "9 ■■■■■g 

^1 ^2 

for j = 1, 2, n, where each A. is a corresponding ma- 
trix coefficient of the matrix A; 

generating the n-tuple g by the second communicating 
party by the formula: 

9 =\z .3 z z ), 
12 n 

where 

BlJ B2J BnJ 

2. =9, -9-, ■■■■9 

J 1 2 n 

for j = 1, 2, n, where each B.. is a corresponding ma- 
trix coefficient of the matrix B; 

public (non-secret) transmitting the «-tuple g from the 
first communicating party to the second communicating 
party; 

g 

public (non-secret) transmitting the «-tuple g from the 
second communicating party to the first communicating 
party; 

creating the shared secrete key ^ by the communi- 



eating parties: generating tlie «-tuple (g^f by tlie sec- 
ond communicating party and generating the «-tuple (g 
by the first communicating party (since (g^f = g^ ^ 
= g^ ^ =(g V, both communicating parties possess 
this w-tuple g^ ^). 

[c2] The method as defined by claim 1, wherein G is an arbi- 
trary compact topological monoid and the polynomials p( 
X ^, X ^, X ^ and q(x ^, x ^, x ^ have non-negative 
integer coefficients, and all the matrices S^, S^, ■■■> 
have non-negative integer matrix coefficients. 

[c3] The method as defined by claim 1, wherein G is an arbi- 
trary compact topological group and the polynomials p(x 
^, X ^, X ^ and q(x ^, x ^, x ^ have arbitrary integer 
coefficients, and all the matrices S , S , S have arbi- 

' l' 2' ' k 

trary integer matrix coefficients. 

[c4] The method as defined by claims 1 and 2, wherein G is 
an arbitrary compact topological monoid, k = 1 and the 
nxn matrix S has non-negative integer matrix coeffi- 
cients so that 

2 n ~ 1 

A=fl -i+fl -S+fl -S +...+a S and B =b -l+b -3+ 

I) 1 2 , n -1 0 1 

b -S +... + b -S , 
2 n -1 ' 

where a ^, a a ^ ^ are non-negative integers pri- 
vately generated by the first communicating party and b 
, b b are non-negative integers privately gen- 

0 1 n -1 



erated by the second communicating party, and wliere I 
is tine identity nxn matrix. 



[c5] Tlie method as defined by claims 1 and 3, wherein G is 
an arbitrary compact topological group, k = 1 and the nx 
n matrix S has arbitrary integer matrix coefficients so 
that 

2 n ~ 1 

A=a -i+fl -S+a S +...+« -S and B =b -i+fc -5+ 

I) 1 2 , n -1 0 1 

b -S +... + b -S , 
2 n -1 ' 

where a a ^, a ^ ^ are arbitrary integers privately 
generated by the first communicating party and b ^, b 
t> are arbitrary integers privately generated by 

1 n -1 

the second communicating party, and where I is the 
identity nXn matrix. 

[c6] The method as defined by claims 1, 2, and 4, wherein G 
is an arbitrary compact topological monoid, k= 1, n =2, 
and the 2x2 matrix S has non-negative integer matrix 
coefficients s , s , s , s so that 

11 12 21 22 

r«o + ^iriSii aiSi2 1 

^= I I 

L<2iS21 ao +aiS22 J 

and 



r^O + ^lSll Z>iSi2 1 

B= I I 

L61S21 30+61S22J 

where « q. « ^ are non-negative integers privately gener- 
ated by tlie first communicating party and q. ^ are 
non-negative integers privately generated by tlie second 
communicating party. Therefore, 

I I 

L(flo^l+6ofll+fll/)lSii+aiZ)iS22)S21 ao*0+(«0^1+^0«l+<3l^lS22)S22+ai^lSl2S21 J 



\B = BA- 



The method as defined by claims 1, 3, and 5, wherein G 
is an arbitrary compact topological group, k= 1, n =2, 
and the 2x2 matrix S has arbitrary integer matrix coeffi- 
cients s , s , s , s so that 
11' 12' 21' 22 

[ao + aiSu aiSi2 1 

^= I I 

L<2iS21 ao +aiS22 J 

and 

r^o + ^iSii ^iSi2 1 

B= I I 

L61S21 ^0+^1822 J 



where « q. « ^ ^Lre arbitrary integers privately generated 
by the first communicating party and ^ q» ^ ^ ^ire arbitrary 
integers privately generated by the second communicat- 
ing party. Therefore, 

r<3o6o+(a0^1+^0«l+«l'^lSll)Sll+fll^lSl2S21 (flo?)i+Z)ofll+fll^lSll+fllZ)iS22)Sl2l 
L(ao*l+*Oai+«l*lSll+«l^'lS22)S21 flo*o+(flO*l+*0«l+«l^lS22)S22+«l*lSl2S21 J 



\B = BA= 



[c8] The method as defined by claims 1 and 2, wherein G is 
an arbitrary compact topological monoid, k = 2 and the 
nxn matrices and have non-negative integer matrix 
coefficients and satisfy S S = S S so that 

_i ^-221 

A= l""^ a S '-S J and B =l""^ b -S '-S 

j ij = 0i,jl2 ij = 0i,jl2 

where all a , i = 0, 1, and j = 0, 1, are 

i . j 

non-negative integers privately generated by the first 
communicating party and all . ., i = 0, 1, n-1, and j 
= 0, 1, n-1, are non-negative integers privately gen- 
erated by the second communicating party, and where I 
is the identity nxn matrix. 

[c9] The method as defined by claims 1 and 3, wherein G is 
an arbitrary compact topological group, k = 2 and the nx 
n matrices and have arbitrary integer matrix coeffi- 
cients and satisfy S -S = S -S so that 

_i '12.21 

A= 1 a S '-S ^ and B =1 b -S '-S 

j ij = 0i,jl2 ij = 0i,jl2 



where all a , i = 0, 1, and j = 0, 1, are 

i . j 

arbitrary integers privately generated by the first com- 
municating party and all , i = 0, 1, w-l, and j = 

i . j 

0, 1, are arbitrary integers privately generated 

by the second communicating party, and where I is the 
identity nxn matrix. 

[ciO] The method as defined by claim 1, wherein n = 1 and G 
is any compact topological monoid and the said 1x1 
matrices A and B are any non-negative integers. 

[cii] The method as defined by claim 1, wherein n = 1 and G 
is any compact topological group and the said 1x1 ma- 
trices A and B are arbitrary integers. 

[ci2] The method as defined by claims 1, 2, 4, 6, and 8 
wherein G is any commutative compact topological 
monoid. 

[ci3] The method as defined by claims 1, 3, 5, 7, and 9, 
wherein G is any commutative compact topological 
group. 

[ci4] The method as defined by claim 11, wherein n = 1 and G 
is any connected compact Lie group. 

[ci5] The method as defined by claim 11, wherein n = 1 and 
said G is a connected closed subgroup of the orthogonal 



group 0(V), where V is a Euclidean vector space. 



[cl6] The method as defined by claim 11, wherein n = 1 and 
said G is a connected closed subgroup of the unitary 
group U(W), where W is a Hermitian vector space. 

[ci7] The method as defined by claim 15, wherein the group G 
is the special orthogonal group SO(V), that is, G is the 
connected component of the identity in the orthogonal 
group 0(V). 

[ci8] The method as defined by claim 16, wherein the group G 
is the unitary group U(W). 

[ci9] The method as defined by claim 15, wherein the set V is 
a Euclidean vector space of dimension m, wherem is an 
integer greater than 1. 

[c20] The method as defined by claim 16, wherein the set W is 
a Hermitian vector space of dimension m, wherem is an 
integer greater than 0. 

[c2i] The method as defined by claim 19, wherein said V is the 
real vector space R "^with the standard Euclidean dot 
product: 

^■y = X y + X y +...+ X y 

11 2 2 mm 

for any vectors x = [x , x , x ] and y = [y , y , y ] 

12m 12m 

of R . 



[c22] The method as defined by claim 16, wherein said W is 
the complex vector space c" with the standard Hermi- 
tian dot product: 

x-y* = x y* + x y* +...+ X y * 

for any vectors x = [x , x , x ] and y = [y , y , y ] 

12m 12m 

of C where y * is the complex conjugate number of the 
complex number y . 

i 

[c23] The method as defined by claims 17 and 21, wherein the 
group G is the group SO of special orthogonal mxm 

m 

matrices, that is, SO is the set of all real mxm matrices 

m ^ 

M such that the determinant of M is 1 and M-M = I, 
where is the transposed matrix of M and lis the iden- 
tity mxm matrix. 

[c24] The method as defined by claims 18 and 22, wherein the 
group C is the group U of unitarymxm matrices, that is, 

m 

U is the set of all complex mxm matrices M such that 

m * * 
M-M = I, where M is the transposed complex conjugate 

matrix of M and I is the identity mxm matrix. 

[c25] The method as defined by claims 23 and 24, wherein the 
group G is any of two isomorphic groups SO^ or U^. 

[c26] The method as defined by claims 13 and 25, wherein the 
group G is a torus of dimension m, that is, G is direct 
product of m copies of the group U . 



[c27] The method of claim 25, wherein as the group C is fur- 
ther defined as the semi-open interval [0, 1) of real 
numbers that includes 0 but does not include 1, where 
the group operation is the fractional part of the sum: 
g*h = {g+ y} 

for any real g and h in the semi-open interval [0, 1), 
where {z} stands for the fractional part of a real number 
z. 

[c28] The method as defined by the claims 1 and 27, wherein 
the said n-tuple g is given by: 

12 n 

where g^, g^,..., g^ are real numbers in the semi-open 
interval [0,1); and for a given integer nxn matrix A = (A. ) 
the power g is given by: 

9^= (y y y ), 

12 n 

wherey ={g A^ . + g A . +...+ g A .}forj = 1, 2, n; 

J 1 Ij 2 2,j n n J ^ 

and for a given integer nxn matrix B = (B. ) the power g 
is given by: 

B_ . V 
12 n 

where z ={q B + g B +...+ g B } for J = 1, 2, .... n. 

j '^1 Ij ^2 2J n J ^ 

[c29] The method as defined by the claims 1, 7, 27, and 28, 
wherein n = 2, g= (g^, g^), the 2x2 matrices A and B are 
given by: 



«lSll 



aisu 



1 



L 



aiS2i 



and 



B = 



r^o + ^isii 

L^lS21 



<30 +<3lS22 J 

^lSl2 1 
^0 +^lS22J 



and the powers g ^ and g ^ are given by: 
where 

y ={g (a + a s ) + g (a s )} and y ={q (as ) + g ( 

^ 1 ^1 0 1 11 ^2 1 21 ^ 2 ^1 1 12 ^2 

a + a s )}; 

0 1 22 ' 

and 

g ={z 
where 

z ={g (b + b s ) + g (b s )} and z ={g (b s ) + g 

1 ^1 0 1 11 ^2 1 21 2 ^1 1 12 ^ 

(b + b s )}; 

2 0 1 22 g g 

Therefore, the shared key g = g = (k k ^) \s 
given by: 

k ={(a b +(a b +b a +a b s )s +a b s s )g +(a b 

1 0 0 0 1 0 1 1 1 11 11 1 1 12 21^1 0 

+ b a +a b s +a b s )s g }, 

1 0 1 1 1 11 1 1 22 21^2 

k ={(a b +b a +a b s +a b s )s g +(a b +(a b +b 

2 0 1 0 1 1 1 11 1 1 22 12^1 0 0 0 1 



a +a b s )s +a b s s )g } 

1 1 1 22 22 1 1 12 21^2 

[c30] Method as defined by the claims 1, 7, 27, 28, and 29, 

wherein n = 2, g= (g^, g^), and the said matrix S is given 



by 



ro -ii 



s = 



Li oj 



therefore: 

the 2x2 matrices A and B are given by: 



[ao - ai~] 



L^i ao J 



and 



B = 



the powers g ^ and g ^ are given by: 
where 

y ={g a + g a } and y ={- g a + g a }; and 
^ J ^1 0 ^2 1 ^ 2 ^1 1 ^2 0 

g = (z z 
where 

z ={g i? + g } and z ={- g + g }; 
1 ^1 0 ^2 1 2^ g ^1 gi 2 0 

Therefore, the shared key g ' = g ' = (k ^, k ^)'\s 
given by: 

k ={(a b -a b )g +(a b +b a )g }, 
100 1 r^i 01 0 r^2 ' 

k ={- (a b +b a )g +(a b -a b )g }. 
201 0 r^i 00 1 1^2 

[c3i] The method as defined by the claim 27, wherein for each 
natural number P, each element g of the group G is 
rounded to a rational element [g]^ of the group G ac- 
cording to the formula:[g]p=(Round(gP))/P 
if Round(gP)<P, and 

if Round(gP)=P, where Round(z) stands for the standard 



rounding of a real number z to the closest integer. 



[c32] The method as defined by the claims 27 and 31, wherein 
for each n-tuple P=(P , P P ) of natural numbers, 

12 n 

each n-tuple g=(g , g g ) of elements of the group G 

12 n 

is rounded to a rational n-tuple [^1^ according to the for- 
mula: 

[g] =([g ] , [g ] , [g ] )■ 

[c33] A method of secure distribution of encryption/decryp- 
tion keys among two communicating parties comprising 
of: 

public (non-secret) selecting a natural number n and k as 
in claim 1; 

public (non-secret) selecting a k-tuple S= (S , S S ) 
of pairwise-commuting nxn matrices with integer coeffi- 
cients as in claim 1; 

public (non-secret) selecting n-tuples natural numbers 
i^=(P,, P, P ),Q=(Q,, Q, Q ), and K=(K K K ); 

12n 12 n 12n 

public (non-secret) selecting a natural number D>1; 
public (non-secret) selecting the commutative compact 
topological group G as in claim 27; 
public (non-secret) selecting an n-tuple ^= (g , g ,...,g ) 

12 n 

elements in G as in claims 28, 29, 30, 31 and 32; 

private (non-public) generating the polynomial p(x ^, x ^, 

X ) in k variables X ,x , x and with integer coef- 
' l' 2' ' k ^ 

ficients by the first communicating party as in claim 1; 



private (non-public) generating tlie polynomial q(x ^, x ^, 

.... X ) in k variables X ,x , .... x and with integer coef- 
' k i' 2 ' k ^ 

ficients by the second communicating party as in claim 
1; 

private (non-public) generating nxn matrix A with inte- 
ger coefficients by the first communicating party as in 

claiml; 

private (non-public) generating nxn matrix B with inte- 
ger coefficients by the first communicating party as in 
claiml; 

generating the n-tuple g by the first communicating 
party as in claim 1; 

generating the P-rounded n-tuple [g ] by the first com- 

municating party as in claim 32;generating the n-tuple g 

by the second communicating party as in claim 1; 

g 

generating the Q-rounded n-tuple [g ]^ by the second 
communicating party as in claim 32; 
public (non-secret) transmitting the w-tuple Ig ]^ from 
the first communicating party to the second communi- 
cating party; 

g 

public (non-secret) transmitting the «-tuple [g ]^ from 
the second communicating party to the first communi- 
cating party; 

creating the shared secrete key by the communicating 

A B 

parties: generating the n-tuple [(Ig ] ) ] by the second 
communicating party and generating the «-tuple Klg ] ) 



] by the first communicating party. 



[c34] The method as defined by the claims 28, 29, 30, 31, 32, 
and 33, wherein at least one coordinate of the said vec- 
tor g=(g , g g ) is an irrational number. 

12 n 

[c35] The method as defined by the claims 28, 29, 30, 31, 32, 
and 33, wherein each coordinate g. of the said vector 
g=(g , g g ) is a rational number of the form 

12 n 

g =M./N , 

I I I 

where 0< M <N . 

i i 

[c36] The method as defined by the claim 33, wherein the n- 
tuples of natural numbers P=(P , P P ),Q=(Q , Q 

12 n 12 

Q ), and K=(K , K K ) and the natural number D sat- 

n 1 2 n 

isfy the following compatibility conditions: 
q" ^■a< (D-iO" \ p" ^■p< (D-jO" \ 
where a and 3 are arbitrary public (non-secret) nxn ma- 
trices with natural coefficients o and 3 respectively 

U U 

such that: 

1 A.|<a., I B..|<3.. 

U U U U _ T 

for all i = l,2,.., n, j=l,2,..,n; and P = (1/?^,1/P^ 1/P 

), Q" ^= (1/Q .1/Q^ 1/Q ), (D-lO" ^= (1/(DK ),1/(DK 

n 1 2 n 1 

),..., 1/(DK )), and the vector inequality 

2 n 

(y,, y^, y ) ^ (z,, z z ) 

12 n 12 n 

is equivalent to n scalar inequalities: 

y < z , y < z , y < z . The compatibility conditions 

112 2 n n 



A B 

guarantee that either at least one coordinate of [([g ] ) ] 

B A P D 

equals 0,or at least one coordinate of[([^ ] ) ] 

■ K Q D ■ K 

equals 0, or 
where -Vzk 6< Vz. 



[c37] The method as defined by the claim 33, wherein a vector 
x=(x ,x X ) is defined to be (K, D)-consistent if: 

12 n 

(-C, -c, -c) <x-[x]^< (c, c, c) , 
where c=l/2-l/(2D). 

[c38] The method as defined by the claims 33, 36, and 37 
wherein both w-tuples (lg^]^f and (Ig ^]^)^ are (K, 
D)-consistent, which guarantees the equality of the 
shared keys: 

[c39] The method as defined by the claims 30, 33, 35, 36, and 
37, wherein 

where 0< M <N , 0< M <N ; and the 2x2 matrices A 

11 12 

and B are given by: 



[an - ai1 



A. 



L 



and 



B = 



Ih bo J 

where \a |<a , la |<a , \b |<6 , \b |<B , where a , a 

0 0 1 1 0 ^0 1 ^1 0 

, B , B are natural numbers each of which does not ex- 

l' ^0 ^1 

ceed N -N ; and: 

1 2' 

a /Q +a / Q <1/(DK ), a /Q + a / Q <(1/DK ), 

0 1 12 l' 1 1 0 2 2 ' 

3 /P +3 /P <1/(DK ), P /P + a /P <1/(DK ). 

^0 1 "^1 2 1 ' ^11 0 2 2 

[c40] The method as defined by the claims 36, 37, 38, and 39, 
wherein each coordinate K of the said «-tuple K=(K^, K 
K ) is given by the formula: 

2 _ n 

K =r 
i 

for 1=1,2, 71, where ris a natural number, and CI, C2, 
Cn are non-negative integers. 



[c4i] The method as defined by the claims 36, 37, 38, 39, and 
40, wherein each i-th coordinate of the shared key Klg ] 

B B A 

) ] = [([g ] ) 1 is presented as a rational r-ary number 

P K Q K 

having at most Ci r-ary digits after the dot. 



